One or more redirect uris are invalid | Creating Oauth 2.0 App

Hello there. I’m attempting to create an Oauth 2.0 App (it’s my first time + I’m a new programmer so I don’t have much experience with this) although I keep getting the error “One or more redirect uris are invalid” after adding my redirect URL.

I’ve already checked the basic stuff, yes it’s https and not http, and when I go to the redirect url it works as intended. I created an oauth before but never ended up using it, although I never ran into this issue. The only thing I can think of is that it might be the fact that my domain is “workers.dev” and not something like “.com/.xyz” (but keep in mine it worked fine when i did it before :man_shrugging: ). This error has like no context which is pretty frustrating! The url looks valid to me so I don’t understand why it’s not to roblox.

If anyone can help I would appreciate it very much! Thanks.

3 Likes

+1 to this. I’ve just created a whole web app hosted on Cloudflare Workers, but the “.dev” domain is apparently not allowed in redirect URLs. I don’t see any reason why the redirect URLs are restricted to certain TLDs.

2 Likes

Testing now, it seems that ‘.dev’ domains work fine, and so do domains with invalid TLDs like ‘.roblox’ or ‘whatever’. This leads me to think that it’s a TLD blocklist rather than an allowlist, since the TLDs ‘.cf’, ‘.ga’, ‘.gq’, ‘.ml’, and fail with the same error.

I’d really like to see a fix for this soon since it’s blocking the deployment of my Roblox OAuth app on my own domain.

1 Like

It appears that “workers.dev” specifically is blacklisted. I bought a domain and used that on my Cloudflare Worker as a workaround instead.

It might be helpful to have a list of blacklisted domains documented somewhere, or even just an error popup saying that “Domain <abc.xyz> is not allowed” when trying to use a blocked domain, in any relevant context, to avoid confusion and unnecessary bug reports.

4 Likes

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.